my goal is to insert custom HTML injections in HTTPS pages.

I've setup Squid with SSL Bump. I generated a self signed certificate. With this setup I'm getting client side warnings that the certificate was signed by an unknown authority.

I have another valid certificate for my web site. I tried to make Squid work with this certificate, but get another issue. The chain of certificate is not valid.

It's looking like ROOT Certificate (valid) -> Company that gave me certificate (Not valid, chain error) -> My company (not valid) -> this site (not valid)

How can I make the last certificate valid on the client side?

I found that I can generate root a certificate and move it to the user on the client side. And import into their browser. But I have a lot of clients and I can't do it on each one.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.